Link Search Menu Expand Document

Request Firewall NullRoute

Workflow #0018

Response Workflow

This workflow should be triggered from a SecureX pivot menu and supports IP address observables. When triggered, this workflow submits a change request in ServiceNow with pre-defined ticket text and the observable provided as input.

GitHub


Requirements


Workflow Steps

  1. Make sure the observable type provided is supported
  2. Calculate the ticket start and end time (defaults to three days from now from 2-5 AM eastern time)
  3. Create the change request in ServiceNow

Configuration

  • Update the input variables on the ServiceNow - Create Change Request activity with your change request contents
  • Update the activities in the Calculate Dates group if you want to adjust the timeframe the change ticket is requested for
  • If you want to change the name of this workflow in the pivot menu, change its display name

Targets

Target Group: Default TargetGroup

Target Name Type Details Account Keys Notes
ServiceNow HTTP Endpoint Protocol: HTTPS
Host: <instance>.service-now.com
Path: /api
ServiceNow_Credentials Be sure to use your instance URL

Account Keys

Account Key Name Type Details Notes
ServiceNow_Credentials HTTP Basic Authentication Username: ServiceNow User ID
Password: ServiceNow Password